But because that's adding more complexity, because now you have two daemons to deal with, that makes the install even more complex than what it is already. And because also a number of people don't care about that. And in particular, if you're running Nix OS, having Nix run as a non-root user is a bit of a joke, because Nix is the thing that's setting up your whole system.

So even if it's not root, it can do whatever it wants. So the idea is that it can leverage an external daemon to do that. But it can also directly have the way it's working right now as part of the main daemon, in which case the main daemon still requires running as root.

So the question was whether uncached artifacts are somehow discoverable. And the answer is kind of yes. So I think you need to check in a derivation whether meter.hydra platforms is empty or if the license is unfree, if I recall it correctly.

Because not everything supports hash passwords. Sorry, the question was, what's the advantage of using systemd for secrets

versus hash passwords? Not everything supports hash passwords. And depending on what you're talking about, hash passwords might actually already be in the rainbow table. So that's sort of problematic. But there are many, many Nix OS modules that expect some form of secret to be given to them.

And they cannot take it as a hashed thing. So for user passwords, that's a thing, although it also says it's dangerous to do that in the documentation. But for like your resting backup password, for instance, you can't redo that. You have to make sure you don't end up with that password in your store one way or another.

So the question is, with systemd secrets, is there a way to manage ownership? Not really. Like the way you do it is when you have a systemd unit, you tell that unit to load that encrypted secrets and systemd mediates that access. So only that unit will have access to it. If you need it to be on disk somewhere, you basically create a unit that

will copy it on disk, like if you want it in your home directory or something, you'd create a unit that will copy it to your home directory. But that's not actually a very common use case unless you're talking about like home manager, which is a different area. Typically, you want secrets to be given to one of your demons.

I don't see any more hands being raised. I'll assume there's no more questions left. And one more applause, please, for the speakers. And then I would like to invite Ryan on stage again.

And the rest, please move on.